Denial of Service Vulnerability in gpsd Affecting GPS Data Interpretation
CVE-2013-2038

Currently unrated

Key Information:

Vendor: Gpsd Project
Status: Gpsd; Ubuntu Linux
Vendor: CVE Published:; 6 February 2014

🔔 Create Gpsd Project Vulnerability Alert

What is CVE-2013-2038?

The NMEA0183 driver in gpsd versions before 3.9 is susceptible to a vulnerability that allows remote attackers to trigger denial of service by sending a specially crafted GPS packet. This malformed packet can cause the gpsd daemon to terminate unexpectedly, potentially leading to service disruptions. Attackers can exploit this flaw via a malformed $GPGGA interpreted sentence that omits specific fields and a terminator, which may further expose systems to arbitrary code execution risks.

References

http://git.savannah.gnu.org/cgit/gpsd.git/commit/?id=dd9c...

x_refsource_CONFIRM

http://www.osvdb.org/93000

vdb-entryx_refsource_OSVDB

http://ubuntu.com/usn/usn-1820-1

vendor-advisoryx_refsource_UBUNTU

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 6, 2014
Vulnerability Reserved
Feb 19, 2013

CVE-2013-2038 Data

JSON